Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hzsE1eywQX99ga-lamrEcOdvVAo.roa
File: hzsE1eywQX99ga-lamrEcOdvVAo.roa (raw, json)
Hash identifier: fjD8TvfA5+8aKhRxUPy3ipobKXrAoU4v+j9/A31fo20=
Subject key identifier: 87:3B:04:D5:EC:B0:41:7F:7D:81:AF:A5:6A:6A:C4:70:E7:6F:54:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187C1A48292F02F30F34737DAA45823C380
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hzsE1eywQX99ga-lamrEcOdvVAo.roa
Signing time: Thu 27 Apr 2023 07:36:36 +0000
ROA not before: Thu 27 Apr 2023 07:36:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:a4:82:92:f0:2f:30:f3:47:37:da:a4:58:23:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 27 07:36:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=873b04d5ecb0417f7d81afa56a6ac470e76f540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:87:62:db:f8:12:c0:e2:da:f9:67:58:70:
b4:cd:de:ad:37:75:49:a7:b5:e3:c1:aa:a7:3a:b0:
e0:6f:3d:98:98:54:10:db:b1:6f:dd:8a:38:f0:82:
73:9c:c2:df:d5:18:7d:6f:f3:ae:99:ec:8f:0d:d0:
4e:2f:19:0c:61:8e:7d:0e:f8:5a:47:70:8d:9f:82:
ac:7f:4f:40:50:df:c1:20:6f:42:23:b8:37:d6:df:
43:7d:ba:ad:30:22:35:e5:94:fe:02:13:20:83:12:
b0:32:93:2d:2b:52:dd:6e:72:56:37:5b:6b:44:c8:
07:86:23:cd:10:91:e1:b0:92:e3:55:36:eb:38:fc:
57:5f:97:a9:8e:b3:b8:27:e3:89:70:72:b3:6e:61:
47:8b:c2:68:dc:2f:07:9b:2b:ed:a3:c5:44:1f:80:
27:4b:c1:77:e5:e3:6b:65:a2:c9:ac:4f:63:48:74:
a0:1f:1f:9b:0e:8a:b2:0f:47:f9:97:2c:4e:f9:9e:
78:f2:80:b7:d2:a8:8b:57:88:4c:b3:71:5a:45:d1:
26:ba:51:84:2c:ac:f5:51:89:39:a4:27:c2:f9:d5:
be:1e:95:2d:8e:15:91:c1:07:24:74:87:c2:92:12:
7c:9a:92:7f:92:97:4c:39:03:a2:f4:c9:61:4c:d5:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:04:D5:EC:B0:41:7F:7D:81:AF:A5:6A:6A:C4:70:E7:6F:54:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hzsE1eywQX99ga-lamrEcOdvVAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.120.64.0/23
87.121.220.0/24
92.119.196.0/23
94.103.126.0/24
94.154.161.0-94.154.163.255
94.154.172.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
91:62:33:35:e1:5d:d5:3c:9e:a3:88:8d:6f:e7:87:32:64:76:
41:1b:6d:2b:79:10:14:d7:43:67:9f:2b:8d:f2:d5:cb:14:13:
bb:22:65:f7:50:a0:5b:87:75:20:94:15:7b:43:a5:2d:89:72:
be:c7:74:ab:57:98:f0:f6:94:7f:98:2b:3c:db:9f:26:ae:e9:
2f:70:92:3c:fe:42:cf:36:02:04:1c:1f:e4:a8:85:59:be:15:
ab:b7:19:25:cd:c6:76:2e:3b:f2:c2:6e:85:3a:97:ec:81:35:
09:20:fa:f2:ce:d2:ea:df:81:9e:56:b4:68:fe:16:7a:dd:a3:
09:33:10:34:bb:64:8c:a5:64:9a:f9:d3:73:9d:cb:fa:b6:42:
27:cd:6d:3e:77:2e:6b:60:f3:68:1a:f7:4f:66:2d:ad:fe:f2:
cf:86:c4:7e:d4:8b:10:5a:f5:79:fd:f9:af:3c:ed:41:f8:aa:
5d:99:fb:0b:1d:13:e2:4d:f0:33:d6:ea:3f:57:5d:b6:f2:05:
a4:af:ed:a1:fd:0d:cc:cf:21:e9:d8:f0:8e:95:0e:02:fc:87:
8e:27:43:55:30:2a:ac:c3:06:42:15:e9:f4:50:50:54:21:34:
db:3e:14:b8:a6:6c:1b:ee:af:cd:04:a5:22:8c:66:b0:0a:b0:
6b:eb:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:40 2024 by rpki-client on console-ams.rpki-client.org